4ee8381097bca462bed8f2ad654ec10a43220b28fd223273a7246aba860c792d

Analysis

max time kernel
116s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
29/12/2023, 21:35

Target

049296612feb21a3b1b615b2021b6de2.exe
Size

349KB
MD5

049296612feb21a3b1b615b2021b6de2
SHA1

cc64991583f7a9f1d5ae7c437714e0ad07dd1ab6
SHA256

4ee8381097bca462bed8f2ad654ec10a43220b28fd223273a7246aba860c792d
SHA512

b5682dacf7c5f8125200db89c881458ccd09f24098fd89a198e2cf1566b43e2c4ee89bbe028517282495bee6cf942b7c318437d1d59ab9097b556fa918192ff6
SSDEEP

6144:Zg7AvNyvflVOU6Q3chmmKsmg1fQK4twGoFm9h7o4noSQmG4P7NM:ZgDlVy6cUmVBJnF14utUO

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4560 set thread context of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91

Suspicious behavior: EnumeratesProcesses 4 IoCs

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4560	049296612feb21a3b1b615b2021b6de2.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 4560 wrote to memory of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91
PID 4560 wrote to memory of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91
PID 4560 wrote to memory of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91
PID 4560 wrote to memory of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91
PID 4560 wrote to memory of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91
PID 4560 wrote to memory of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91
PID 4560 wrote to memory of 3060	4560	049296612feb21a3b1b615b2021b6de2.exe	91
PID 3060 wrote to memory of 3548	3060	049296612feb21a3b1b615b2021b6de2.exe	49
PID 3060 wrote to memory of 3548	3060	049296612feb21a3b1b615b2021b6de2.exe	49
PID 3060 wrote to memory of 3548	3060	049296612feb21a3b1b615b2021b6de2.exe	49
PID 3060 wrote to memory of 3548	3060	049296612feb21a3b1b615b2021b6de2.exe	49

memory/3060-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-5-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3060-6-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-8-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3060-9-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3060-15-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/3060-17-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/3548-11-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/3548-12-0x000000007FFD0000-0x000000007FFD1000-memory.dmp

Filesize
4KB

Download
memory/4560-0-0x0000000000400000-0x00000000004DF000-memory.dmp

Filesize
892KB

Download
memory/4560-7-0x0000000000400000-0x00000000004DF000-memory.dmp

Filesize
892KB

Download